I remember when a friend and I, both with barely any experience at all, tried building our first SaaS.
We went crazy over access control, roles, etc, wondering how operating systems and databases did it, driving ourselves mad over how to implement it at the lowest possible levels so the rest of the stack couldn’t possibly go around it…
We were pretty certain there was some highly complex dark magic behind it all.
A few years later, I worked on a project where we built a SaaS MVP for a client, with access control.
Turns out most people apparently consider ABAC overkill and will go with a few simple if statements if they can afford to.
